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RECEIVE REQUEST 
FOR IMPLEMENTATION 
OF A SERVICE 


s 


> 


f 




DETERMINE RESTRICTION(S) 
IF ANY, TO BE IMPOSED 
ON REQUESTED 
IMPLEMENTATION 


> 


f 






DYNAMICALLY 
CONSTRUCT REQUESTED 
IMPLEMENTATION 


y 




f 






PROVIDE REQUESTED 
IMPLEMENTATION 
TO APPLICATION 
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s-204 



3^. 3 
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404 




TO 448 TO 440 



5437-109 

+ 



6/14 




INSTANTIATE 
WRAPPER OBJECT 



ENCAPSULATE 
RESTRICTIONS AND 
INSTANCES WITHIN 
WRAPPER OBJECT 



PROVIDE CIPHER 
INSTANCE TO 
APPLICATION 



^456 
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DEFAULT SET 



(1) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : 
MAX KEY SIZE: 128 BITS 
OTHER LIMITATION (S) : 

(2) ALGORITHM NAME: DES 

EXEMPTION MECHANISM : 
MAX KEY SIZE: 128 BITS 
OTHER LIMITATION (S) : 

(3) ALGORITHM NAME: RC5 

EXEMPTION MECHANISM : 

MAX KEY SIZE: 64 BITS 

OTHER LIMITATION (S) : 10 ROUNDS 



EXEMPT SET 

(1) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : KEY RECOVERY 
MAX KEY SIZE : 256 BITS 
OTHER LIMITATION (S) : 

(2) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : KEY ESCROW 
MAX KEY SIZE : 256 BITS 
OTHER LIMITATION (S) : 
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DETERMINE THE 
CALLING 
APPLICATION 
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604 



612 



DETERMINE 
RESTRICTIONS 
BASED UPON 

DEFAULT 
LIMITATIONS 



RETURN 
RESTRICTIONS 
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SELECT NEXT ENTRY IN POLICY A 



s 



804 



DOES 
POLICY B HAVE A 
CORRESPONDING 
ENTRY 
? 



YES 



808 



NO 



820- 



DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
A-ENTRY AND B-ENTRY 




NO 



YES 



816 



DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
A-ENTRY AND B-WILDCARD 



CREATE NEW ENTRY IN 
MERGED POLICY C 



•824 



FROM 828 



TO 828 




844 

DOES^ 

YES /-^POLICY C HAVE A 
CORRESPONDING 
ENTRY 

? 



> 


848 


DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
B-ENTRY AND A-WILD CARD 




> 


852 
f S 




CREATE NEW ENTRY IN 
MERGED POLICY C 




YES 



POLICY C COMPLETED 
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NO 



DETERMINE WHICH 
DIGITAL SIGNATURE 
TO SUBMIT 



SUBMIT THE 
SELECTED DIGITAL 
SIGNATURE AND 
KEY(S) 



RECEIVE RESPONSE 



SIGNATURE 
MECHANISM 
IS LEGITIMATE 



^904 



908 



•912 



NO 




932 




TERMINATE 



936 



SIGNATURE 
MECHANISM IS 
NOT LEGITIMATE 



920 




TERMINATE 




924 
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DETERMINE WHICH 
INFORMATION SET 
TO SUBMIT 



s 



1004 



SUBMIT THE 
SELECTED INFORMATION 

SET TO THE 
UNTRUSTED MECHANISM 



s 



1008 



RECEIVE RESPONSE 
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1012 



NO 




UNTRUSTED 
MECHANISM 
IS LEGITIMATE 



1032 




TERMINATE 



1036 



UNTRUSTED 
MECHANISM IS 
NOT LEGITIMATE 
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TERMINATE 



1024 




